Sekit CSF · Identity & Access Management · Process

RCF-0068Least privilege / RBAC

Access rights are adjusted when roles change and removed when no longer needed

Mapping at a glance

RCF-0068Least privilege / RBACIdentity & Access Management · Process

A.5.18Access rightsISO/IEC 27001:2022 · Annex A controls PR.AA-03Users and devices authenticatedNIST CSF 2.0 PR.AA-05Access permissions managedNIST CSF 2.0 CE4.1Manage the account lifecycleCyber Essentials CE4.2Control administrative privilegesCyber Essentials

RCF-0068 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.18Access rightsequivalentGranting strictly from the role definition, adjusting on role change and stripping unneeded access on review is A.5.18 in full: provision, review, revoke, tied to the access policy.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-03Users and devices authenticated PR.AA-05Access permissions managed

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.1Manage the account lifecycle CE4.2Control administrative privileges

This topic through the other lenses

All Identity & Access Management controls

Ask Sekura: “What evidence proves RCF-0068?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.